Enterprise architecture proposes consolidating identity services. What should security contribute to the decision?

1. Only the preferred login-page color
2. Approve consolidation based solely on reduced license administration
3. Select the identity vendor before reviewing the shared-service failure model
4. Protection requirements, trust boundaries, failure impact, and control dependencies